Re: Disadvantages of CPSizeme tool.

Matlu · ‎2024-01-17

Hello.

I want to run the CPSizeme tool on the active members of my ClusterXL HA, as well as on my SMS, with the intention of receiving an email with a small "report" that tells me about the status of the resources of my boxes. My question is, is there any "disadvantage" in using this tool?

I am reading the sk88160, and there is a part where they mention the following:

"We recommend not to run cpsizeme for more than 24 hours." .... Does this mean that there can be any risk with my boxes, if I leave the script running for more than 1 day?

My intention is to track the resources of my box on a daily basis for at least 1 week.

Is there any risk of not "stopping" the script if I go over 24 hours once I run it?

Greetings.

the_rock · ‎2024-01-17

No bro. There are no risks. I had people run it for 2 weeks and its totally fine. It literally does not consume any resources at all.

Best,

Andy

Matlu · ‎2024-01-17

Buddy,

Is this CPSizeme tool as accurate as using "CPView"?

the_rock · ‎2024-01-17

I would say yes.

Elad_Chomsky · ‎2024-01-17

Hi @Matlu ,

The recommendation is not due to any risk. It is just that after 24 hours, the measurements are usually accurate enough to continue. So no need to stress the machine further. But If you feel like you want to get a wider result set, you can definitely run it for more.

Matlu · ‎2024-01-17

Hello,

The intention is to have an "average" of approximately 7 to 15 days.

So, the idea is to leave the script "RUNNING" during those days, so that a report is sent, on a daily basis.

Once the test period of 7 or 15 days is over, we intend to "turn off" the script.

I understand that to stop the script after the evaluation days, we must follow the next step of the sk:

Is this correct?

Greetings.

Elad_Chomsky · ‎2024-01-17

Hi @Matlu ,

Yes - It is correct.

Matlu · ‎2024-01-17

Sorry, for my ignorance, but, these questions that the script asks you, are they "optional"?

I am simply "omitting" them by giving an "Enter" and without putting values, since the client does not have the exact data that we need.

We can just "skip it", right?

We are leaving the default script to work for 24Hrs.
It means that once it finishes executing the script, we will have to wait 24Hrs, so that the mail arrives to the client, right?

Cheers. 🙂

Lesley · ‎2024-01-17

Give the script an hour when it is done, to collect data. 24 hour is good, don't do more then 2 /3 days.

If you do longer it collects so much data that in the end you will lose the outcome.

Don't count on the e-mail. Just check the box when it is done. I will give you the location of the xml that you can upload on the CP website. There again you can give the ISP speed info again etc.

-------
If you like this post please give a thumbs up(kudo)! 🙂

Matlu · ‎2024-01-17

Hello,

To most of the questions like:

* What is the estimated number of internal users passing through this gateway?
* What is the estimated maximum throughput on this gateway [Mbps]?
* What is the size of your ISP internet pipe [Mbps]?

I simply omitted the interregons, as we do not have the complete information at this time.

The script is already executed.

I simply executed the script (according to the SK, it applies the revision every 24 hours).

I understand that I have to wait, 24Hrs, to get my first report, right?

[Expert@FW:0]# ./cpsizeme

Welcome to Check Point Performance Sizing Utility - version 5.8

It is recommended to run the latest version of the Check Point Performance

Sizing Utility

Do you want to check if an updated version is available (y/n)? [y] n

______________________________

Over the next 24 hours, the utility will collect performance data

from your appliance. It is recommended to run the utility on the

part of the week where you expect peak performance.

______________________________

After running this utility, 2 archive files are created:

1. Detailed archive file - includes all the collected raw performance data used

for analysis & statistics, including information such as connections and

routing tables with IP addresses. Used mainly by Check Point support staff.

2. Summary archive file - needed for generating a PDF document of the gateway

performance statistics of traffic, cpu, memory utilization and an XML file to

be used for appliance sizing. This archive does not include connection data

and IP addresses.

Note: Sharing your performance information with Check Point will help us to

improve our products.

Please choose:

1 Run the utility and automatically send both the detailed & summary

archives to Check Point

2 Run the utility and automatically send only the summary archive to

Check Point

3 Run the utility without sending the data automatically to Check Point

Your choice? [1] 1

Testing connection to Check Point...ok!

Cheers.

the_rock · ‎2024-01-17

Bro, just follow the prompts and run it for 24 hours. Case closed : - )

Andy

Matlu · ‎2024-01-19

Hey, Andy.

One query, what is the email listed as "sender" when mailing reports to a destination?

I have configured the SK of CPSizeme, but the problem is that my recipient, who has his corporate email, has not received the email with the report.

I have the doubt, who is the user that appears as "sender" of the report sent by mail.

Greetings.

Chris_Atkinson · ‎2024-01-19

sizing@checkpoint.com

CCSM R77/R80/ELITE

Matlu · ‎2024-01-19

My client has not received the automatic report by mail.

Could it be a problem of a possible "Antispam" filter?

Cheers.

the_rock · ‎2024-01-19

It could be, check to see if any logs about it.

Andy

genisis__ · ‎2024-01-17

The tool has been around for years and is pretty good. I'm not sure if it's been updated over the years, but last time I used it this was not compatible with VSX, it was only useful for standard gateways running GAIA, so again with SMB devices not sure if this will work.

the_rock · ‎2024-01-17

Totally agree.

Chris_Atkinson · ‎2024-01-17

Note the tool is not intended for use on Management servers.

CCSM R77/R80/ELITE

genisis__ · ‎2024-01-18

Are there plans to update this useful tool to support VSX and SMB devices?

Chris_Atkinson · ‎2025-06-11

I think this is unlikely in the current form for each but I agree it would be useful.

I will pass along your request for feedback.

CCSM R77/R80/ELITE

the_rock · ‎2025-06-11

I had some customers ask me that same question, would really help, for sure.

Andy

Matlu · ‎2025-06-11

Hi, @Chris_Atkinson
Does this tool work in VSX and MDS Cluster environments?
Thanks for your answer.

Lesley · ‎2025-06-11

VSX no, MDS cluster yes.

The following limitations apply to cpsizeme script:

SecureXL must be enabled on Security Gateway for this script to work
VSX is not supported
In ClusterXL High Availability mode, it is not supported to run this script on the Standby member.
Do not run the cpsizeme script when there is a shift in time due to daylight saving or other system clock change.
We do not recommended to run the cpsizeme script on Check Point appliances with SAM card / Acceleration cards.

-------
If you like this post please give a thumbs up(kudo)! 🙂

Matlu · ‎2025-06-11

Hi, @Lesley

Does this tool work on SmartEvent boxes, and Log Server?

Check Point does not plan to use this tool in VSX environments?

Lesley · ‎2025-06-11

No is a gateway only tool. To size SmartEvent / Mgmt you can use:

https://support.checkpoint.com/results/sk/sk178325

https://support.checkpoint.com/results/sk/sk181782

To be honest they are a guideline, to be certain contact local office to assist you.

CPSizeme for firewall is a good basis, the other 2 SK's are a rough guideline.

When it will be supported for VSX I have no idea tbh

-------
If you like this post please give a thumbs up(kudo)! 🙂

Chris_Atkinson · ‎2025-06-11

Not for VSX, the tool is gateway centric and typically not relevant to management.

CCSM R77/R80/ELITE

Are you a member of CheckMates?

Disadvantages of CPSizeme tool.